For wallet recovery or private support, request it here https://xitter.cf/t.co/H172QGcmGu GPG: 7c81 7290 6b9a 7eaf 9f0b d8f1 62a1 d33e 233c 8ea0

Joined August 2019
Crypto-Guide retweeted
"By shifting key processes to the secure mobile app, Tangem’s hardware wallet doesn't need a display." It's a software wallet then. Stop claiming it's the "peak of hardware wallet security".
Hey, Chris! A screen doesn’t solve blind signing. Huge sums have been lost to transactions people approved on screens they couldn’t actually read. Please read it: tangem.com/en/blog/post/blin… Why the "no screen is bad" narrative fails By shifting key processes to the secure mobile app, Tangem’s hardware wallet doesn't need a display. The secure app handles all critical interactions and is protected by the robust security layers outlined above. This simplifies the user experience while keeping their digital assets safe. The app side is hardened separately: integrity checks against modified versions, root and jailbreak detection, tapjacking protection, certificate pinning, DexProtector, and open code on GitHub. Details here: tangem.com/en/blog/post/mobi… We compared the two approaches and chose the one we believe is safer and simpler for people to use. Ledger Cryptobilis incident shows it was the right choice: with Tangem, a story like this simply couldn’t have happened.
6
10
1
80
4,275
This is toxic and disingenuous. Tangem is misleading so many folks who don’t know better. Gaslighting the industry for years. Blind signing has a clear definition. This product is a glorified 2FA hot wallet and doesn’t protect from the most simple type of attack: a compromised phone or computer.
Hey, Chris! A screen doesn’t solve blind signing. Huge sums have been lost to transactions people approved on screens they couldn’t actually read. Please read it: tangem.com/en/blog/post/blin… Why the "no screen is bad" narrative fails By shifting key processes to the secure mobile app, Tangem’s hardware wallet doesn't need a display. The secure app handles all critical interactions and is protected by the robust security layers outlined above. This simplifies the user experience while keeping their digital assets safe. The app side is hardened separately: integrity checks against modified versions, root and jailbreak detection, tapjacking protection, certificate pinning, DexProtector, and open code on GitHub. Details here: tangem.com/en/blog/post/mobi… We compared the two approaches and chose the one we believe is safer and simpler for people to use. Ledger Cryptobilis incident shows it was the right choice: with Tangem, a story like this simply couldn’t have happened.
42
21
4
200
22,120
Crypto-Guide retweeted
Presenting: DOOMSIGNER On startup: Doom or Snake Secret button press: Shieldsigner Aka Seedsigner with smartcard support Dream come true 🥸 Note this project is my personal playground for silent payments & musig2 etc and not at all secure or even intended to be
6
5
1
42
1,545
Crypto-Guide retweeted
That is an awesome idea. The guy from CryptoGuide on YouTube is a dev that made a fork that does this and that is pretty far along. It just works. github.com/3rdIteration/seed… take a look you will be pleasantly surprised with how good it is. Maybe there just needs to be an intro with @satochip as most of this is already built.
1
1
4
270
Did you know that you can turn your ordinary home @seedsigner into a Shield Signer with Seedkeeper or Satochip (see satochip.io/) for a few euros? No more QR codes. Parts and software below👇🏼:
3
11
29
1,239
So got secure boot implemented on Luckfox pico which closes a persistent security limitation when running on Raspberry Pi :) Also finally got a bunch of 2.8 inch displays that were stuck in customs, so can make some boards available for folk to beta test next week some time.
2
6
45
1,902
Crypto-Guide retweeted
👻Specter-DIY v1.10.5 is out 🔐 Security hardening for randomness and transaction verification: - TRNG fails safely - Stricter change-output verification - Mixed-wallet input warnings restored - Reproducible builds fixed github.com/cryptoadvance/spe…
🤖 Made with AI
9
35
3
95
13,156
No Pi, no problem. Shieldsigner running @SeedSigner on Luckfox Pico Mini :)
7
15
1
88
4,055
No Pi, no problem.. Luckfox pico mini plus hat looks pretty good, lower profile camera helps too :) Will get a basic reference case and should be ready to roll for folk who want to beta test shortly :) Luckfox pico devices supported on Shieldsigner (@SeedSigner smartcard fork)
9
13
2
68
3,565
Coldcard had three sources of entropy sitting inside it from day one. Only one of them was plumbed in. New video: where hardware wallets actually get their randomness, why Coldcard's design was always weak, and why most other wallets would have been fine youtu.be/di-R_soeBe8
6
15
2
68
8,348
Same bug on any of these would have been survivable.
7
257
Worth naming who got this right, because most of the market did: @Trezor mixing device and host entropy since day lne @Blockstream Jade pulling from every layer @ShiftCrypto BitBox02 same @FOUNDATIONdvcs Passport, added multi-source entropy as one of its first changes
4
2
15
628
🚨Announcement: Krux has a new lead maintainer We're pleased to announce that Krux has a new lead maintainer @JohnDoe_le_frog Jean joined Krux years ago, initially as a skeptic. He started with a deep jaw-dropping investigation into Krux's flash storage...
24
41
13
184
25,853
Crypto-Guide retweeted
I've been sitting on an article about the DIY signing device ecosystem for way too long. @BitcoinMagazine isn't accepting outside submissions anymore. Who's got a platform that I can guest publish this on? @SeedSigner @SpecterDIY @selfcustodykrux #Kern @YTCryptoGuide @satochip
51
62
4
304
13,141
Crypto-Guide retweeted
Want to give an update on AI scans b/c a few people have asked about it. Over the last week and a half we have received a *lot* of results from automated scans using Kimi K3 and similar tools from the bitcoin red team and from individuals. @newtonick, @KeithMukai and some of our other regular contributors have evaluated all of those submitted, with people like @YTCryptoGuide providing great perspectives as well. Our sense right now is that none of the identified issues are considered critical, and that all of them require a compromised malicious coordinator to attempt the given exploit. To date, we haven't seen or heard about any instances of a malicious coordinator attempting to execute one of these kind of attacks. There are some mitigations our devs can put into place to solve for identified edge cases, and we are planning a near-term release with those fixes (targeting the end of this month). To serve their designated purpose, wallet coordinators have to connect to the bitcoin network and are in turn of course exposed to the wider internet. If you have concerns about your wallet coordinator, consider migrating to a fresh install on a separate machine that is not your daily driver where you browse the internet, open emails, etc. etc. Another option is to use a security-oriented Linux live USB like Tails, and then install Sparrow or another coordinator in that environment. There are also projects like DTails (dtails.gitlab.io) that can pre-install Sparrow or other bitcoin tools in a bootable image. There were no SeedSigner-related vulnerabilities identified involving bitcoin at rest, so waiting until our next release before you make a transaction is reasonable too. These AI vulnerability scanning tools will likely continue to surface security issues in many bitcoin tools, and in the broader infosec landscape, for at least the next 12-18 months at least. This will likely continue to be a tumultuous time and is a good reminder for us all to think carefully about our own cold storage setups and what risks we may, and may not, be exposed to. Multi-vendor, multi-sig wallets continue to provide the strongest assurances in the current adversarial environment.
6
16
2
80
18,080
Crypto-Guide retweeted
Someone ordered the fully transparent Smartcard SeedSigner. Combined with the new white PCBs and white buttons gives a great result!
18
10
1
178
11,093
Crypto-Guide retweeted
Highly recommend @YTCryptoGuide for one on one support in the bitcoin space. I’ve learned so much from his channel/privately. New video dropped today regarding the coldcard situation. youtu.be/GQOoONFuDE0?si=4L1e…
2
12
412